CVE-2020-2742

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-28003)

Oracle Enterprise Manager is Oracle's on-premises deployment management platform that provides a single management platform for managing all customer Oracle deployments.Enterprise Manager Base Platform is the complete installer that includes OMS, agents, repositories, and management plug-ins. A...

Oracle Database Server Unauthorized Access Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Fusion Middleware (CVE-2020-2787)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle E-Business Suite E-Business Intelligence (CNVD-2020-38204)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. E-Business Intelligence is one of the business intelligence...

The vulnerability of Google Chrome browsers, related to the use after release, allows a violator to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to its use after release. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM LKS Administration & Reporting Tool and Agent

Summary Mutiple security vulnerabilities have been found in IBM Java Runtime used by IBM LKS Administration & Reporting Tool ART and Agent. A mitigation has been included in the latest release. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...

The vulnerability of the Grafana data representation web tool, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Grafana data presentation web tool is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of the tcpdump.c.get_next_file() function: This function is used by the tcpdump tool for analyzing network traffic. An attacker can exploit this vulnerability to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the tcpdump.c.getnextfile function, a tool for analyzing network traffic, is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information and compromise its integrity and availability...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30601)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to compromise confidentiality and integrity...

Logic Flaw Vulnerability in Ocean CMS

Ocean CMS is a set of programs to adapt to the computer, cell phones, tablets, APP multiple terminal entrances, no encryption code, safe and secure building tools. There is a logic flaw vulnerability in Ocean CMS, which can be exploited by attackers to affect confidentiality and integrity...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-30598)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices suffer from an input validation error vulnerability that can be exploited by attackers to compromise availability, confidentiality, and...

Security Bulletin: API Connect is impacted by multiple vulnerabilities in Oracle MySQL.

Summary IBM API Connect had addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-2791 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server Server: Audit Plug-in component could allow an authenticated attacker to cause low confidentiality impact...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus

Summary Multiple security vulnerabilities exist in IBM® Runtime Environment Java™ Technology Edition 6.0.16.30 and earlier used by WebSphere Message Broker, and IBM® Runtime Environment Java™ Technology Edition 7.0.9.50 and earlier used by WebSphere Message Broker and IBM Integration Bus, and the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/TPF

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2020-2593 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Networking component could allow an unauthenticated...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Classification

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by IBM eDiscovery Analyzer. These issues were disclosed as part of the IBM Java SDK updates in Oct 2019. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-2989...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7. These issues were disclosed as part of the IBM Java SDK updates in October 2016 and January 2017. Multiple Open Source OpenSSL vulnerabilities have also been addressed. Vulnerability Details CVEID: CVE-2016-21...

Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight

Summary Several vulnerabilities have been addressed for: IBM SDK Java Technology Edition Quarterly CPU Oct 2015, including Oracle Oct 2015 CPU; IBM SDK Java Technology Edition Quarterly CPU Jan 2016, including Oracle Jan 2016 CPU; Java specific SLOTH Weak MD5 Signature Hash; and several OpenSSL...